[JIRA] Commented: (SSPCPP-319) Augment XMLAccessControl for time based access control.

[Scott Cantor (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SSPCPP-319?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14094#comment-14094 ] 

Scott Cantor commented on SSPCPP-319:
-------------------------------------

Playing with this syntax:

<AccessControlProvider type="Time" operator="AND|OR">
    <TimeSinceAuthn>PT1H</TimeSinceAuthn>
    <Time> LT|LE|EQ|GE|GT ISO </Time>
    <Year> LT|LE|EQ|GE|GT nn </Year>
    <Month> LT|LE|EQ|GE|GT nn </Month>
    <Day> LT|LE|EQ|GE|GT nn </Day>
    <Hour> LT|LE|EQ|GE|GT nn </Hour>
    <Minute> LT|LE|EQ|GE|GT nn </Minute>
    <Second> LT|LE|EQ|GE|GT nn </Second>
    <DayOfWeek> LT|LE|EQ|GE|GT 0-6 </DayOfWeek>
</AccessControlProvider>


> Augment XMLAccessControl for time based access control.
> -------------------------------------------------------
>
>                 Key: SSPCPP-319
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-319
>             Project: Shibboleth SP - C++
>          Issue Type: Improvement
>          Components: Configuration
>            Reporter: Bradley Schwoerer
>            Assignee: Scott Cantor
>            Priority: Minor
>             Fix For: 2.5
>
>   Original Estimate: 3 days
>  Remaining Estimate: 3 days
>
> Two pieces
> 1. Augment XMLAccessControl to allow for time of day access control. This would allow for access control based upon the time of day, local to the server, eg 06:00-20:00 hours.
> 2. Augment XMLAccessControl to allow for comparison against logon time of user on IdP.  This may need more investigation of how to expose from IdP. This would allow for a hard timeout of 8 hours after logon from IdP.  
> The first is more concrete and more of a priority.  Looking for possible suggestions on the second as it is a desired setting from a security department.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira